The SVG library nanosvg [0] suffers from a memory corruption bug that can lead to at least DoS
The bug exists in the `nsvg__parseColorRGB` function, which can be reached by parsing a malicious SVG file through
`nsvgParseFromFile` or `nsvgParse` This should also affect libraries/packages that provide bindings to nanosvg, for
example:
- Lua: ...